WORLD INTELLECTUAL PROPERTY ORGANIZATION 
International Bureau 




PCT 

INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 



(51) International Patent Classification 6 : 
G06F 11/00 



Al 



(11) International Publication Number: WO 99/18506 

(43) International Publication Date: 15 April 1999 (15.04.99) 



(21) International Application Number: PCT/US98/20659 

(22) International Filing Date: 2 October 1998 (02.10.98) 



(30) Priority Data: 

08/943,582 



3 October 1997 (03.10.97) 



US 



(71) Applicant: AUDIBLE, INC. [US/US]; 65 Willowbrook Boule- 

vard, Wayne, NJ 07470 (US). 

(72) Inventors: MOTT, Timothy; 1 10 Old Mil Road, P.O. Box 

6289, Ketchum, ID 83340 (US). STORY, Guy; 151 Spring 
Street, New York, NY 10012 (US). JUN, Benjamin, 
Che-Ming; 108 1-B Tanland Drive, Palo Alto, CA 94303 
(US). PAI, Samuel, Hong- Yen; 3306 Piragua Street, 
Carlsbad, CA 92009 (US). KOCHER, Paul; 143 Fillmore 
Street, San Francisco, CA 94117 (US). 

(74) Agents: SALTER, James, H. et al.; Blakely, Sokoloff, Taylor 
& Zafman LLP, 7th floor, 12400 Wilshire Boulevard, Los 
Angeles, CA 90025 (US). 



(81) Designated States: AL, AM, AT, AT (Utility model), AU 
(Petty patent), AZ, BA, BB, BG, BR, BY, CA, CH, CN, CU, 
CZ, CZ (Utility model), DE, DE (Utility model), DK, DK 
(Utility model), EE, EE (Utility model), ES, FI, FI (Utility 
model), GB, GD, GE, GH, GM, HR, HU, ID, IL, IS, JP, 
KE, KG, KP, KR, KZ, LC, LK, LR, LS, LT, LU, LV, MD, 
MG, MK, MN, MW, MX, NO, NZ, PL, PT, RO, RU, SD, 
SE, SG, SI, SK, SK (Utility model), SL, TJ, TM, TR, TT, 
UA, UG, UZ, VN, YU, ZW, ARIPO patent (GH, GM, KE, 
LS, MW, SD, SZ, UG, ZW), Eurasian patent (AM, AZ, BY, 
KG, KZ, MD, RU, TJ, TM), European patent (AT, BE, CH, 
CY, DE, DK, ES, FI, FR, GB, GR, IE, IT, LU, MC, NL, 
PT, SE), OAPI patent (BF, BJ, CF, CG, CI, CM, GA, GN, 
GW, ML, MR, NE, SN, TD, TG). 



Published 

With international search report. 

Before the expiration of the time limit for amending the 
claims and to be republished in the event of the receipt of 
amendments. 



(54) Title: METHOD AND APPARATUS FOR TARGETING A DIGITAL INFORMATION PLAYBACK DEVICE 



(57) Abstract 

A method, apparatus and article of manufacture for 
targeting a digital information playback device (212). A 
device ID (223) and/or a group ID (225) is embedded 
in the playback device. A device ID or a group ID is 
also embedded in a digital information file (216). Upon 
receiving the digital information file, the device ID or 
the group ID of the playback device is compared to 
that contained in the digital information file. The digital 
information file is then played if either the device ID or 
the group ID of the digital information file matches that 
of the playback device. 
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METHOD AND APPARATUS FOR TARGETING A 
DIGITAL INFORMATION PLAYBACK DEVICE 



FIELD OF THE INVENTION 

5 The present invention relates generally to a digital information 

transmission, receiving, and playback system, and more specifically, to a 
method and apparatus for targeting a digital information playback device. 

BACKGROUND OF THE INVENTION 

10 Recent technological advances in the compression of digital data and 

the expansion of storage capacities of computer systems together with the 
increased bandwidth of computer network infrastructures have created new 
possibilities for personalized access to and usage of large amounts of digital 
information. One form of this type of digital information is audio 

15 information delivered across a computer network as digitized information. 

In the field of interactive digital information transmission, receiving, 
and playback systems, several patents are known to the present applicants. 
U.S. Patent No. 5,132,992, issued July 21, 1992 to Yurt et al. (Yurt), describes a 
system of distributing video and/or audio information employing digital 

20 signal processing to achieve high rates of data compression. The Yurt patent 
describes a transmission system including a conversion means for placing 
the items from a source material library into a predetermined format as 
formatted data. Audio data is compressed by an audio compressor by 
application of an adaptive differential pulse code modulation (ADPCM) 

25 process to the audio data. Stored items are accessed in the compressed data 

library through the use of a unique address code assigned to each item during 
storage encoding. The unique address code is used for requesting and 

1 
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accessing information and items throughout the Yurt transmission and 
receiving process. The Yurt transmission system includes means by which a 
user enters a customer identifier (ID) code by which the system accesses the 
users account, and indicates to the system that the user is a subscriber of the 
5 system. If a subscriber is in good standing, the Yurt system delivers selected 
titles using the described techniques. 

One significant problem with the audio transmission and receiving 
system described in Yurt is the lack of an effective means for ensuring the 
security of the digital information library and of the items downloaded to a 

10 user from the digital information library. Although Yurt describes the use of 
a unique identification code assigned to items in the library and a customer 
ID code assigned to particular users, no authentication protocols or 
encryption techniques are described to prevent the unauthorized creation of 
clone libraries or the unauthorized download or copying of library items. 

15 Secondly, Yurt and related prior art does not describe an authentication or 
encryption means providing secure transactions between a server based 
digital information library supporting a client computer system having an 
interface to a mobile playback device. Thirdly, the prior art does not describe 
a mechanism for selecting a digital information passage to be previewed. 

20 Prior art systems also do not describe a system whereby only part of a 
program gets downloaded from a client computer system to a mobile 
playback device depending on how much storage space is available in the 
mobile playback device. Prior art systems also do not describe a mechanism 
for specifying multiple programs to be downloaded from a digital 

25 information library into a mobile playback device. Prior art systems also do 
not detail the processes required in the authoring system to generate content 
for the digital information library. Finally, prior art systems do not describe 
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an accounting system whereby library content providers can perform real- 
time queries on usage information related to the access of library items. 



3 
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SUMMARY OF THE INVENTION 

The present invention provides a method, apparatus, and article of 
manufacture for targeting a digital information playback device. A device ID 
and or a group ID is embedded in the playback device. A device ID or a group 
5 ID is also embedded in a digital information file. Upon receiving the digital 
information file, the device ID or the group ID of the playback device is 
compared to that contained in the digital information file. The digital 
information file is then played if either the device ID or the group ID of the 
digital information file matches that of the playback device. 

10 

BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention is illustrated by way of example and not 
limitation in the figures of the accompanying drawings, in which like 
references indicate similar elements and in which: 
15 FIG. 1 illustrates a typical computer platform compatible with the 

present invention; 

FIG. 2 illustrates a high level block diagram of the computer network 
based digital information library system compatible with the present 
invention; 

20 FIG. 3 illustrates a high level block diagram of the authoring system 

compatible with the present invention; 

FIG. 4 illustrates an alternative embodiment having a plurality of 
library servers; 

FIG. 5 illustrates an alternative embodiment having a plurality of 
25 library server processes; 
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FIG. 6 illustrates an alternative embodiment having a single 
authoring/authorization server; 

FIG. 7 illustrates an alternative embodiment wherein client computer 
systems have a local library; 
5 FIG. 8 illustrates an alternative embodiment wherein mobile playback 

devices have a direct network interface in lieu of a client computer system; 

FIG. 9 illustrates an alternative embodiment wherein a kiosk is used 
to retain and distribute selected programming; 

FIG. 10 illustrates an alternative embodiment wherein all system 
10 components are connected through a common network; 

FIG. 11 illustrates a flowchart of a security scheme using the digital 
signature standard (DSS) compatible with the present invention; 

FIG. 12 illustrates a flowchart of a player security scheme using a 
digital signature authentication (DSA) compatible with the present 
15 invention. 
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DETAILED DESCRIPTION OF A PREFERRED 
EMBODIMENT OF THE PRESENT INVENTION 

The preferred embodiment of the present invention is a computer 
network based digital information library system employing authentication, 
5 targeting, and encryption protocols for the secure transfer of digital 

information library programs to a client computer system and a mobile 
digital information playback device removably connectable to the client 
computer system. In the following detailed description, numerous specific 
details are set forth in order to provide a thorough understanding of the 

10 present invention. However, it will be apparent to one of ordinary skill in 
the art that these specific details need not be used to practice the present 
invention. In other instances, well known structures, interfaces, and 
processes have not been shown in detail in order not to unnecessarily 
obscure the present invention. 

15 FIG. 1 illustrates a typical data processing system upon which one 

embodiment of the present invention is implemented. It will be apparent to 
those of ordinary skill in the art, however that other alternative systems of 
various system architectures may also be used. The data processing system 
illustrated in FIG. 1 includes a bus or other internal communication means 

20 101 for communicating information, and a processor 102 coupled to the bus 
101 for processing information. The system further comprises a random 
access memory (RAM) or other volatile storage device 104 (referred to as 
main memory), coupled to bus 101 for storing information and instructions 
to be executed by processor 102. Main memory 104 also may be used for 

25 storing temporary variables or other intermediate information during 

execution of instructions by processor 102. The system also comprises a read 
only memory (ROM) and/or static storage device 106 coupled to bus 101 for 
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storing static information and instructions for processor 102, and a mass 
storage device 107 such as a magnetic disk drive or optical disk drive. Mass 
storage device 107 is coupled to bus 101 and is typically used with a computer 
readable mass storage medium 108, such as a magnetic or optical disk, for 
5 storage of information and instructions. The system may further be coupled 
to a display device 121, such as a cathode ray tube (CRT) or a liquid crystal 
display (LCD) coupled to bus 101 through bus 103 for displaying information 
to a computer user. An alphanumeric input device 122, including 
alphanumeric and other keys, may also be coupled to bus 101 through bus 

10 103 for communicating information and command selections to processor 

102. An additional user input device is cursor control 123, such as a mouse, a 
trackball, stylus, or cursor direction keys coupled to bus 101 through bus 103 
for communicating direction information and command selections to 
processor 102, and for controlling cursor movement on display device 121. 

15 Another device which may optionally be coupled to bus 101 through bus 103 
is a hard copy device 124 which may be used for printing instructions, data, 
or other information on a medium such as paper, film, or similar types of 
media. In the preferred embodiment, a communication device 125 is 
coupled to bus 101 through bus 103 for use in accessing other nodes of a 

20 network computer system or other computer peripherals. This 

communication device 125 may include any of a number of commercially 
available networking peripheral devices such as those used for coupling to 
an Ethernet, token ring, Internet, or wide area network. It may also include 
any number of commercially available peripheral devices designed to 

25 communicate with remote computer peripherals such as scanners, 
terminals, specialized printers, or audio input/output devices. 
Communication device 125 may also include an RS232 or other 
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conventional serial port, a conventional parallel port, a small computer 
system interface (SCSI) port or other data communication means. 
Communications device 125 may use a wireless means of data transfer 
devices such as the infrared IRDA protocol, spread-spectrum, or wireless 
5 LAN. In addition, communication device 125 is used in the preferred 

embodiment to couple the mobile playback device 212 to the client computer 
system 214 as described in more detail below. One other device used in the 
preferred embodiment is sound circuitry 130 either with attached speakers or 
headphones 132, or with analog audio outputs suitable for input into audio 

10 reproduction equipment such as external amplifiers and speakers, cassette 
adapters, etc. Sound circuitry 130 is well known in the art for playing audio 
files. Alternatively, sound circuitry may be a radio transmitter which 
transmits audio data on a predefined frequency for reception and playback by 
a radio receiver. Other wireless methods are possible. 

15 Note that any or all of the components of the system illustrated in FIG, 

1 and associated hardware may be used in various embodiments of the 
present invention; however, it will be appreciated by those of ordinary skill 
in the art that any configuration of the system may be used for various 
purposes according to the particular implementation. In one embodiment of 

20 the present invention, the data processing system illustrated in FIG. 1 is an 
IBM® compatible personal computer (PC), an Apple Macintosh® personal 
computer, or a SUN® SPARC Workstation. Processor 102 may be one of the 
80X86 compatible microprocessors such as the 80486 or PENTIUM® brand 
microprocessors manufactured by INTEL® Corporation of Santa Clara, 

25 California. 

The software implementing the present invention can be stored in 
main memory 104, mass storage device 107, or other storage medium 

8 
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accessible to processor 102. It will be apparent to those of ordinary skill in the 
art that the methods and processes described herein can be implemented as 
software stored in main memory 104 or read only memory 106 and executed 
by processor 102. This software may also be resident on an article of 
5 manufacture comprising a computer usable mass storage medium 108 
having computer readable program code embodied therein and being 
readable by the mass storage device 107 and for causing the processor 102 to 
perform digital information library transactions and protocols in accordance 
with the teachings herein. 

10 

Digital Information Library System 

FIG. 2 illustrates the computer network architecture used in the 
preferred embodiment of the present invention. In general, the network 
architecture of the present invention includes a library site 250 coupled to a 

15 client site 210 via a conventional distribution network infrastructure 240. 
This conventional distribution network infrastructure 240 can be 
implemented as a standard telephone connection provided between the 
library site 250 and client site 210 through an Internet provider to enable data 
communication on the Internet over a conventional telephone network. 

20 This use of the Internet as a distribution network is well known to those of 
ordinary skill in the art. In an alternative embodiment having cable modem 
capability, communication over a conventional cable network is possible in 
lieu of communication over the telephone network. The cable network is 
typically much faster (i.e. provides a much greater bandwidth) than the 

25 standard telephone network; however, cable modems are typically more 
expensive than standard POTS (plain old telephone system) modems. In 
another alternative embodiment having conventional Integrated Services 
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Digital Network (ISDN) capability, the distribution network 240 is accessed 
using an ISDN modem. Again, the ISDN network is typically faster than the 
POTS network; however, access to an ISDN network is generally more 
expensive. Cable modems and ISDN implementations are alternative 
communications media to the POTS implementation. 

In addition, it will be apparent to those of ordinary skill in the art that 
other forms of networking may equivalently be supported by the present 
invention. For example, a wireless transmission means such as infrared or 
radio links may also provide the distribution network 240 described in the 
present application. As an alternative to the Internet, a proprietary 
network/bulletin board such as AMERICA-ON-LINE (AOL), or 
COMPUSERVE may be used. 

Each of the servers at library site 250 and the client computer system 
214 at client site 210 can be implemented as a computer system such as the 
one described above in connection with FIG. 1. It will be apparent to one of 
ordinary skill in the art that the library server 260, authoring system 280, and 
authorization server 270 can be remotely located yet networked together as a 
distributed system using the techniques described above. In addition, the 
present invention allows for multiple library servers, authoring systems and 
authorization servers. Conversely, the servers may be implemented as 
separate functions of a single machine. These alternative embodiments are 
illustrated in FIG. 4-8 and are described in more detail below. 

The mobile playback device 212 is a minimally configured, low-cost, 
standalone mobile unit for receiving and storing digital information files or 
programs as downloaded by library server 260 and client computer system 
214 and for playing back the digital information files or programs for a user 
of the mobile playback device 212. The mobile playback device 212 is 
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temporarily removably coupled to the client computer system 214 while the 
download takes place. Once downloaded, the mobile playback device 212 may 
be detached from the client computer system 214 and used as a standalone 
digital information playback device. A co-pending U.S. Patent Application 
titled, "Interactive Audio Transmission, Receiving and Playback System", 
assigned Serial No. 08/490,537, and assigned to the Audible Words 
Corporation of Montclair, NJ describes the details of mobile playback device 
212. 

In its basic form, the preferred embodiment of the present invention is 
a digital information library system providing selection of digital 
information programming on demand over a computer network. In an 
alternative embodiment, the digital information programming is selected 
via the computer network but delivered using mass storage media 241. This 
alternative embodiment is described in more detail below. 

The digital information library is an indexed collection of digital 
information programming, drawing content from digital information 
sources such as books, daily news and entertainment feeds, conferences and 
educational sources, other computer systems, the host on the World Wide 
Web (WWW) of the Internet, and customized audio or visual image 
programming. Other sources of the digital information content include, but 
are not limited to, conference or seminar proceedings, lecture or speech 
materials, language lessons, readings, comedy, customized spoken digests 
and related, "need-to-know n business information, computer software, local 
sound studio material, text to speech conversion of machine readable files, 
pre-recorded material from magnetic tape, CD-ROM, digital audio tape, or 
analog cassette tape. This digital information content is input as raw digital 
information content to authoring system 280 shown in FIG. 2, In an 
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alternative embodiment, a raw digital information digitizer 307 is included 
for receiving raw input and converting the input to a digital form which can 
be manipulated as a digital information file. 

In an alternative embodiment, the digital information comprises 
digitized image or graphics data used to produce visual images on a display 
screen or projection screen. These images may be included in the digital 
information retained and maintained by the library server 260. 

Authoring System 

Authoring system 280 is used to edit, index, compress, scramble, 
segment, and catalog digital information content into digital information 
programs in digital information files, which are stored on mass storage 
media 241 or on library server 260 as scrambled and compressed digital 
information files 262. The digital information programs are initially 
categorized according to traditional criteria (e.g. genre, modern fiction, 
mystery, adventure, romance, non-fiction, classics, self-help, science fiction, 
westerns, etc.). Categories associated with specific authors or publishers are 
also provided. Both unabridged and abridged titles are provided. In some 
circumstances, it may be necessary to digitize digital information content 
from an undigitized form. The raw information digitizer 307 is provided for 
this purpose. Authoring system 280 also partitions digital information 
content into segments, which can be identified, searched, and skipped over if 
desired. All of these functions are performed by authoring system 280. 

FIG. 3 illustrates the authoring system 280 of the preferred 
embodiment. Authoring system 280 receives digital information content 
from a variety of conventional sources as raw digitized data. This digital 
information data is fed to three components of the authoring system 280 of 
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the preferred embodiment. The digital information compressor 314 receives 
the raw digital data and compresses the digitized data. There are a variety of 
conventional techniques in existence for compressing digital data. These 
techniques can be optimized depending upon the type of digital data being 
processed. Thus, the present invention provides several compression 
methods and a means for the authoring system operator 305 to select 
between these methods based upon the category of digital information 
content 310 being input to the digital information compressor 314. 
Alternatively, the selection of compression method may be performed 
automatically by interpretation of the digital information content 310 itself. 
A compressed digital information file is output by digital information 
compressor 314 to scrambler 318. 

The raw digital information content 310 is also fed to template header 
generator 312. Each digital information file maintained by the library server 
260 includes other descriptive information used to identify the file's content 
and to provide information used to process the digital information within 
the file. Each digital information file includes a template header, a 
descrambling map, selected preview clips, and the digital information 
programming itself. In the preferred embodiment, the template header 
comprises a number of attributes corresponding to the digital information in 
the file. For example, the digital information may be audio information 
generated from the content of a book or other published work. In this 
example, the audio file template header contains attributes including: 1) the 
title of a book, volume, or medium from which the digital information 
content originated, 2) the legal copyright associated with the digital 
information content, 3) audible title(s) of the content, 4) a table of contents of 
the content, and 5) playback settings for appropriately playing or rendering 
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the digital information. The table of contents contains content navigation 
information including but not limited to: the number of chapters, the length 
of the program, and information indicative of the relevant content sections. 
The table of contents is generated with input from authoring system operator 
305 or automatically by analysis of digital information content 310. The 
descrambling map 322 is used to interpret the digital information after the 
digital information has been scrambled by scrambler 318 as described below. 
The preview clips 324 comprise short pre-generated portions of digital 
information content used to give a consumer a sense of the content of a 
particular digital information file. In the preferred embodiment, these 
previews are generated as conventional formatted files which can be directly 
played by sound generation circuitry 130 or rendered by other means. A 
digital information file can have several preview clips associated with it. 
The preview clips 324 are not compressed or scrambled in the preferred 
embodiment. The template header 312 remains with the digital information 
file as it is transferred to the network 240 or mass storage media 241. The 
other descriptive information related to a digital information file is typically 
stored with digital information file, but is not required to be so stored. 

Referring again to FIG. 3, template header generator 312 generates the 
template header given information from a particular portion of digital 
information content 310. Input from Authoring System Operator 305 and 
Digital Information Compressor 314 may be solicited during the header 
generation process. The template header is provided to library server 260. 
Other portions of the digital information file header are provided by 
scrambler 318 and preview generator 323. These portions of the digital 
information file header are assembled into the header for a particular digital 
information file by library server 260. The remainder of the digital 
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information file is filled with compressed, scrambled, and segmented digital 
information content. 

After digital information compressor 314 has compressed the raw 
digital information using a selected compression method suitable for the 
5 category of digital information, the scrambler 318 scrambles the digital 
information. The digital information is scrambled to prevent an 
unauthorized consumer from using the digital information. In the preferred 
embodiment, scrambler 318 uses a conventional encryption method to 
render the data unusable. A corresponding descrambling map 322 is 

10 generated to provide a means for descrambling the scrambled digital 

information file. A scrambling map 316 is used by scrambler 318 to scramble 
the digital information file. The scrambler 318 can encrypt the entire digital 
information file or selected critical subsets of the digital information file. The 
level of scrambling can be selected depending upon the capabilities of the 

15 authoring system 280, the mobile playback device 212 and /or the anticipated 
software player 226 on client computer system 214. In an alternative 
embodiment, a proprietary digital information format is used in lieu of 
scrambler 318. 

The scrambled digital information content is output by scrambler 318 
20 to segmentation logic 326. Segmentation logic 326 partitions the digital 
information content into blocks for efficient storage in and transfer to a 
mobile playback device 212 or software player 226 and for efficient navigation 
during playback. Transport integrity data is generated and appended to the 
segmented digital information. In an alternate embodiment, portions of the 
25 segmentation process may take place before or after digital information 

compressor 314 and scrambler 318. Segmentation information may also be 
used in the header generation process by template header generator 312. The 

15 
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compressed, scrambled, and segmented digital information blocks are 
provided to the library server 260 by authoring system 280. Library server 260 
assembles the segmented digital information blocks, the descrambling map 
322, the preview clip(s) 324, and the template header 312 for a particular item 
5 of digital information content into a digital information program file or files, 
which are stored in a digital information program file storage area 262. Other 
raw digital information content is converted into digital information files 
using the authoring system 280 in a similar manner. 

10 Library Server 

Referring again to FIG. 2, the library server 260 is responsible for 
maintaining the digital information program files 262 created by the 
authoring system 280. In addition, the library server 260 receives requests for 
access to the digital information program files 262 from client computer 

15 systems 214 over network 240 and manages purchase and delivery of the 
selected digital information files and /or delivery of selected preview clips 
324. The library server 260 includes library management software 261 for 
performing these library server functions and a library key 263 used for the 
authentication protocol described below. Library management software 261 

20 includes processing logic for receiving and responding to client computer 
system 214 requests for access and /or purchase of a digital information 
program file 262. Upon receiving such a client request, library server 260 uses 
authorization server 270 to authenticate the request with client information 
272 generated and maintained by library server 260 or authorization server 

25 270. The client information 272 includes client identifiers which are used to 
target content for playback on individual mobile playback devices 212 or 
software players 226. Client information 272 may also contain client personal 
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information, user content preferences, client billing history, player usage 
history, and player group lists. In an alternative embodiment, portions of 
client information 272 may instead be stored in server 260. Using the 
authorization protocol described in more detail below, the library server 260 
determines if the client request can be serviced. If approved, the library 
server 260 accesses the digital information program file(s) or preview clip(s) 
requested by the client computer system 214, delivers the selected preview 
clip(s) or builds encrypted, targeted, and digitally signed digital information 
files using the authentication protocol described in more detail below, and 
transfers the encrypted and compressed digital information file(s) to the 
requesting client computer system 214 via network 240. Distributable mass 
storage media 241 may also be used as a delivery medium for the transfer of 
information to client system 214. The client computer system 214 may then 
independently download the selected digital information files (or a subset 
thereof) into the mobile playback device 212 for subsequent playback. The 
library server 260 also collects usage statistics on the access history of the 
digital information files 262 and stores this usage data into usage statistic 
storage area 264. The library server 260 also stores operating code segments 
(firmware) for the client browser 219, software player 226, and for mobile 
playback device 212. This operating code can be downloaded to the client 
computer system 214 in the same manner as digital information files are 
transferred. Player configuration data for playback device 212 and software 
player 226 is stored on the library server 260 and can be customized or 
updated in the same manner as digital information files and firmware are 
transferred. Configuration data includes, but is not limited to, audio 
prompts, user interface options, group ID information, and information 
playback parameters. Player configuration data is transferred to client 
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computer system 214, software player 226, or mobile playback device 212 as 
required according to client information 272. 

The library server 260 interfaces with a client application program or 
client browser 219 executing on client computer system 214. The client 
browser 219 is used to make requests of library server 260 for various types of 
service including, but not limited to, searching the digital information files 
262 for a desired program, previewing a selected preview clip associated with 
a digital information file 262, purchasing a selected program, requesting 
operating code segments or player configuration data, and downloading the 
purchased program or other material to the requesting client computer 
system 214. 

The library server 260 interface with the authorization server 270 and 
client computer system 214 uses the unique authentication protocol and 
encryption protocol of the preferred embodiment of the present invention. 
The preferred embodiment of these protocols is described in the sections 
below. 

Client Computer System 

Referring again to FIG. 2, the client computer system 214 represents a 
consumer or end user computer system, typically a personal computer, such 
as the sample system illustrated in FIG. 1, with which a consumer may 
browse, preview, select, purchase, and take delivery of digital information 
content from digital information library server 260 across distribution 
network 240. Client computer system 214 comprises client browser software 
219, a mobile device interface 221, storage for encrypted and compressed 
digital information files 220 downloaded from the network 240, software 
player 226, and segment download data 222 derived from digital information 
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files 220 for defining the storage segments in mobile playback device 212 and 
for assisting in the downloading of digital information files 220 from client 
computer system 214 to mobile playback device 212. Client computer system 
214 also includes a server public key 215 used for authenticating digital 
information and software files received from server 260. Client browser 
software 219 provides the control logic with which the client or consumer 
accesses and purchases titles from the digital information library 262 of 
library server 260. Client browser software 219 also provides control logic 
which requests and downloads configuration information or operating code 
from server 260. The client browser software 219 can be configured to 
perform these operations without direct human intervention. The mobile 
device interface 221 is a software interface used to control the transfer of 
control information, operating code, and digital information files from client 
computer system 214 to mobile playback device 212. Encrypted and 
compressed digital information files 220 are received by client computer 
system 214 from library server 260 over network 240. In an alternate 
embodiment, distributable mass storage media 241 is used instead of network 
240 to transfer information to client computer system 214. The software 
player 226 is a software module used to emulate the operation of mobile 
playback device 212 and for playing digital information files through the 
sound circuitry 130 and audio output device 132 of client computer system 
214. Operating code and configuration information for the software player 
226 can be downloaded or updated from the server 260 in the same manner 
as the mobile playback device 212 can be downloaded or updated. The 
software player 226 functionality is the equivalent of the functionality and 
operation of the mobile playback device 212. Thus, the use of the term 
"player" throughout this document generally applies to both the mobile ' 



19 



WO 99/18506 



PCT/US98/20659 



playback device 212 and software player 226. Software players 226 are assigned 
unique player IDs and can be assigned group IDs that function similarly to 
IDs assigned to mobile playback devices 212. 

Mobile Playback Device 

The mobile playback device 212 converts a digital information file into 
sound or displayable imagery which is played through audio output means 
or displayed on a display device. In the preferred embodiment, the mobile 
playback device 212 is a minimal capability, low-cost device primarily 
dedicated to playing audio files or displaying visual images or text on a 
display device. The mobile playback device 212 is minimally configured to 
retain its light-weight, low cost, and readily mobile features. The preferred 
embodiment does not therefore include the use of a portable personal 
computer or laptop computer as the mobile playback device 212; because, 
such general purpose computing devices typically do not meet the light- 
weight and low cost constraints of the preferred mobile playback device 212. 
Such general purpose computing devices typically have unnecessary 
functionality, more complicated interfaces, and may suffer cost and 
performance penalties in comparison to the special purpose mobile playback 
device 212. In the preferred embodiment, the mobile playback device 212 
includes a processor, memory, and an interface to client computer system 214 
over which compressed digital information files 216 are received. As 
described in more detail below, mobile playback device 212 also includes a 
player ID 223, group IDs 225, and server public key 215 used for 
authenticating digital information and software files received from server 
260 via client computer system 214. The user controls the mobile playback 
device 212 using buttons and knobs provided on the device. These controls 
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are used to navigate through digital information files 216, adjust 
configuration data and playback parameters, or perform other functions as 
directed by firmware stored in playback device 212. When coupled to the 
player, client computer system 214 or other electronic devices can solicit user 
5 input from these controls. In an alternative embodiment, a set of additional 
user controls is provided on a remote control unit that is coupled to the 
player via a wired or wireless connection. Digital information output may be 
provided via a headphone jack, on board speaker, or wireless transmitter to a 
separate wireless receiver with speakers or headphones. Audio level can be 

10 adjusted with a volume knob. A wireless transmitter may contain an 

adjustment knob to adjust the transmission frequency or other transmission 
parameters. Visual information output is provided via LCD display, LED 
display, or outputs to a standard visual display device. The mobile playback 
device 212 contains a limited quantity of non-volatile memory, RAM, and 

15 ROM. Digital information content, configuration data, and operating code 
are stored in the memory space of the mobile playback device 212. 
Configuration data includes but is not limited to: public and private IDs, 
content playback parameters, and user interface parameters. The use of non- 
volatile memory allows portions of the digital information content, 

20 configuration data, and firmware to be updated via download. Both digital 
information content and firmware (operating software) is stored in this 
memory device. Portions of the firmware and configuration information are 
stored permanently in a read only memory (ROM). An internal memory 
allocation method is used to track the content of mobile playback device 212 

25 memory. This allocation method, in conjunction with segment navigation 
data 218, also provides the means for locating desired digital information, 
program, configuration data, or header data resident in the mobile playback 
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device 212 memory. The mobile playback device 212 includes an interface to 
the client computer system 214 through which the mobile playback device 
212 receives compressed digital information files 216, software updates, and 
configuration changes from client computer system 214. 

Downloading Digital Informa tion Content. Software Updates, or 
Configuration Information Fro m the Library Server to the Client Computer 
System 

The client browser software 219 of client computer system 214 operates 
in cooperation with library management software 261 of library server 260 
and the firmware resident on the mobile playback device 212 to provide a 
means by which a consumer may browse, preview, select, purchase, and take 
delivery of selected digital information content from digital information 
library server 260 across distribution network 240. The digital information 
content is typically downloaded to the client computer system 214 at the time 
of purchase, but it is possible to download digital information content either, 
1) sometime after the purchase, or 2) multiple times after an initial purchase. 
The client browser 219 can be configured to download content to client 
computer system 214 without user intervention. In addition, portions of the 
client computer system 214 software itself or mobile playback device 212 
resident software/firmware may be downloaded or updated from library 
server 260. The mobile playback device 212 resident software /firmware is 
downloaded through client computer system 214. If library server 260 has an 
updated or more recent copy of client computer system 214 software or 
mobile playback device 212 software/firmware, the library server copy is 
downloaded to replace the outdated version of the corresponding client 
computer system 214 software or mobile playback device software 212. The 
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software is encrypted, scrambled, and digitally signed in a manner similar to 
the scrambling and delivery of the digital information files. Changes to the 
ID list, audio prompts, and other configuration data for playback device 212 
can be downloaded in a manner similar to the downloading of software 
updates from library server 260. 

The preferred embodiment utilizes three authentication processes to 
protect the transfer of information from server 260 to client system 214 and 
playback device 212. First, a point-to-point authentication protocol is 
performed whereby the library server 260 must verify that the requesting 
client computer system 214 is an authorized client and the client computer 
system 214 must verify that the library server 260 is an authorized provider. 
Secondly, a targeting protocol is performed whereby the library server 260 
utilizes a set of identifiers (i.e. player IDs) for mobile playback devices 212 
authorized to receive the selected download data from library server 260. 
The mobile playback device identifiers are provided by client computer 
system 214 or are referenced from user profiles stored on library server 260. 
In the targeting process, library server 260 formats and downloads data that 
can only be read or played by mobile devices 212 with these identifiers. 
Thirdly, a library server digital signature is appended to the downloaded data 
for use by the mobile playback device 212 to verify that the downloaded data 
was originated by an authorized library server and to verify the integrity of 
the downloaded data. These three authentication processes of the present 
invention are described in detail in the following sections. 

Point-to-Point Authentication Protocol 

The library server 260, client computer system 214, and mobile 
playback devices 212 each have a unique verification sequence which is used 
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to verify the authenticity of another system. In communications between 
library server 260 and client system 214, both systems alternately act to (1) 
request verification of the other system and (2) provide an authenticating 
response to a verification request. Communication between mobile devices 
5 212 and client computer system 214 use a similar authentication protocol, as 
well as real-time communication between mobile devices 212 and library 
server 260 via client system 214. This verification sequence comprises a pre- 
defined set of bit streams or data structures which are sent by the requesting 
system (i.e. the system requesting verification) to the receiving system being 

10 authenticated (i.e. the respondent) in a point-to-point transmission. The 

receiving system must respond to the verification sequence in a pre-defined 
manner by sending particular response bit streams or data structures to the 
requesting system. If the appropriate response data from the respondent is 
received by the requesting system, the system being verified is considered an 

15 authorized system. Conversely, the system being verified is considered 
unauthorized if the appropriate response data is not received by the 
requesting system prior to a pre-defined time-out period. Both systems begin 
communication by acting as requesters and respondents in separate 
verification cycles. Upon completion of these point-to-point authentication 

20 cycles, further client/server processing only continues if both systems deem 
each other to be authorized systems. 

In an alternate embodiment, point-to-point authentication is used in a 
subset of the communications among library server 260, client computer 
system 214, and mobile playback devices 212. In another embodiment, point- 

25 to-point authentication is not used and system security rests on the use of 
targeting and /or digital signature authentication. 
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Targeting Protocol 

The targeting protocol of the present invention is a means and 
method for limiting the playback of digital information content, the 
adjustment of player configuration data, and the download of player 
operating code to a specified player 212/226 or a specified set of mobile 
playback devices 212. Each player 212/226 contains a unique player ID 223. 
The player ID 223 comprises a public player ID and a private player ID. The 
public player ID is a unique identifier and serves as a serial number for player 
identification. The private player ID is used to target data for individual 
mobile playback devices 212. Private player IDs are never sent through any 
communications link or network path, except during installation. In the 
preferred embodiment, private player IDs should be sufficiently diverse, but 
need not be unique. 

Mobile playback devices 212 may be logically grouped together using a 
Group ID. Digital information content, software, or configuration data 
changes may be targeted to a group of mobile playback devices 212 defined by 
a group ID. Each player 212/226 includes memory space for storage of one or 
more group IDs 225 of which the particular player 212/226 is a member. Each 
group ID includes a public portion and a private portion, each of which is 
equivalent to the public and private player IDs, respectively. Each group is 
identified by a uniquely valued public ID that is not shared with other player 
or group IDs. Digital information content, software, or configuration data 
can be targeted to a particular group ID in the same way as it would be 
targeted for a specific player ID. Mobile playback devices 212 in the same 
group share the same Group ID. A particular Group ID is pre-defined as the 
global group to which all mobile playback devices 212 are a member. Mobile 
playback devices 212 may be members of more than one group. A particular 
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player 212/226 is added to a new group by appending the new group ID to the 
set of group IDs 225 maintained in the particular player 212/226. The new 
group ID is appended after the server 260 provides a public group ID and a 
group key to the player 212/226 via client computer system 214. The player 
212/226 generates a private group ID from the combination of the group key 
and the mobile playback device's 212 private player ID. As with the private 
player ID, the private group ID is never sent through any communications 
link or network path, except during installation. In an alternative 
embodiment, players receive the group private ID directly or by combining 
the group key with the players public ID or other known numeric value. In 
another alternative embodiment, the private group ID is not used in the 
targeting process and is not transferred to the player. The group assignment 
process may be restricted to using real-time communications between server 
260 and the player via client system 214, or it may take place sometime after 
group assignments have been downloaded to client system 214. Having 
described the player IDs and group IDs defined in the present invention, the 
use of these IDs in the targeting protocol is described next. 

Library server 260 includes a player ID table 266 as shown in FIG. 2. 
Player ID table 266 includes a storage area for private IDs and public IDs. The 
private IDs are pre-loaded into player table 266 when a new mobile playback 
device is installed into the system or when a new group is established. In 
another embodiment, ID table 266 is a mathematical function which 
converts group or player public IDs. Public player and group IDs are sent by a 
client computer system 214 to the server 260 when the client computer 
system 214 desires to target a particular player 212/226 or set of mobile 
playback devices 212 to a particular specified digital information, software 
content, or configuration data selection. Digital information selection is 
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made from the files 262 stored on library server 260. Software or 
configuration data selection is made from files stored on server 260 or from 
data generated upon request by server 260. Software content and 
configuration data is prepared and scrambled in a manner similar to the 
authoring process for digital information content. Once an association is 
made by client computer system 214 between a set of targeted public IDs and 
the associated data to be transferred from server 260, library server 260 creates 
a targeted header for the selected files. The library management software 261 
consults the public ID to private ID table 266 to locate the corresponding 
targeted private ID(s). The targeted header comprises a combination of the 
descrambling map 322 from the selected files with the private player IDs 
corresponding to the targeted mobile playback devices 212. The descrambling 
map 322 is thereby encrypted using the secret IDs of the targeted mobile 
playback device(s) 212. This targeted header is linked with the corresponding 
digital information or software content of the selected file in a network 
transport ready data block. A digital signature is applied to the data block as 
described below in connection with the data signature protocol. Transport 
integrity data (such as the use of checksums or cyclic redundancy check) is 
applied to the data block and the data block is sent to the client computer 
system 214 via network 240. Because the data block can only be unscrambled 
using the corresponding descrambling block 322 in its header and because the 
descrambling block 322 was combined (i.e. encrypted) with a private ID 
known only by the targeted mobile playback device(s) 212, only the targeted 
mobile playback device(s) 212 will be able to unscramble and read the data 
block. The selected digital information, software content, and configuration 
data is thereby targeted to a particular set of mobile playback devices 212. 
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For small groups of mobile playback devices 212, each targeted header 
of a digital information file may contain a plurality of descrambling maps, 
each associated with a different player 212/226. In this manner, multiple 
mobile playback devices 212 can read a single file 220 stored on the client 
5 computer system 214. 

A person of ordinary skill in the art will note that alternative methods 
of targeting exist. In an alternative embodiment, library server 260 uses the 
targeted recipients private player 212/226 identifier or the targeted group's 
private group identifier to generate scrambling map 316. Descrambling map 
10 322 is not stored with the file as it is already known by the recipient player or 
group. This method targets content to a single player 212/226 or group and 
achieves the identical result of preventing unauthorized playback of content. 

In another alternative embodiment, library server 260 does not 
scramble the digital information content or uses a known key to scramble the 
15 digital information content. In this embodiment, descrambling map 322 is 
unnecessary and is not stored with the file. Either the public or private 
player 212/226 identifier can be stored in the header for targeting 
identification purposes. Upon receipt of data from library server 260, the 
player 212/226 checks if its player 212/226 identifier or group identifier is 
20 included in the header. This method assumes unmodified mobile playback 
devices 212 and achieves the identical result of preventing unauthorized 
playback of content. 

In another alternative embodiment, the player IDs for the targeted 
mobile playback devices 212 are sent to the library server 260 by the client 
25 computer system 214 when the user registers with the library server 260 to 
obtain the user's client ID. In this alternative embodiment, these player IDs 
are stored on the library server 260 in a user profile. In this embodiment; the 



WO 99/18506 



PCT/US98/20659 



library server 260 manages the player IDs for the targeted mobile playback 
devices 212. 

Digital Signature Protocol 
5 The third authentication protocol used in the present invention is the 

digital signature protocol. For selected data blocks generated by library server 
260 and downloaded to a client computer system 214, library server 260 uses 
its private library key 263 to apply a digital signature to the data block. The 
digital signature comprises a known bit string or data pattern which is 

10 combined with the data in data blocks that are downloaded from library 

server 260 to client computer system 214. The library server 260 may perform 
this operation on all the data blocks or a selected subset of the data blocks. 
After a data block is downloaded to a player 212/226 through a client 
computer system 214, the player 212/226 can retrieve the digital signature 

15 applied by the library server 260 using a public server key known to the 
player 212/226. The player 212/226 can thereby verify that the data block 
originated with an authorized library server 260, and also verify the integrity 
of the data block. The public server key is also known to client computer 
system 214, which can perform the identical operation to verify that the data 

20 block originated with an authorized library server 260. In this embodiment, 
library server 260 performs signatures on the content. A person of ordinary 
skill in the art would realize that the signatures may also be performed on 
the digital information by authoring system 280. The signatures may also be 
performed in a multiple step process shared by authoring system 280 and 

25 library server 260. 

In an alternate embodiment, digital signatures are applied to 
downloaded material by a trusted client computer system 214. In another 
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alternate embodiment, digital signatures are not applied to downloaded 
material and system security rests on the use of targeting and /or point-to- 
point authentication. 

5 Downloading Digital Informat ion Content. Software Updates, or 

Co nfiguration Information From the Client Computer System to the Mobile 
Playback Device 

In a first step, the client computer system 214 and the mobile device 
use the point-to-point authentication protocol described above to verify that 

10 an authorized mobile playback device 212 is communicating with an 

authorized client computer system 214. If this is the case, the mobile playback 
device 212 transmits its memory map to the client computer system 214 via 
the mobile device interface 221. A table of contents defining the available 
digital information files 220 and player configuration profiles resident in 

15 client computer system 214 is displayed along with the mobile playback 

device 212 memory map for a user of client computer system 214. The user 
selects which files 220 of client computer system 214 should replace portions 
or segments of specified mobile playback device 212 memory as defined by 
the mobile playback device 212 memory map. Alternately, client browser 219 

20 can be configured to automatically perform this selection process. In either 
case, the user is prevented from selecting digital information content larger 
than the available memory of playback device 212. In addition, control 
software and/or configuration data for playback device 212 may be 
automatically updated by client computer 214. The specified digital 

25 information files 220, associated headers, operating code, or configuration 
data are thereafter downloaded into mobile playback device 212 memory. 
The mobile playback device 212 uses checksums to verify the integrity of the 
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download. The mobile playback device 212 uses the server public key 215, the 
header, and the digital signature to authenticate the download as described 
above. The header descrambling map is used by targeted mobile playback 
devices 212 to unscramble the downloaded data. In other embodiments, 
mobile playback device 212 may unscramble the downloaded data and/or 
decompress the downloaded data before authenticating the signature. Each 
segment of the digital information content may be independently 
authenticated and validated using any of the techniques described above. 
Digital information prompts on the mobile playback device 212 guide the 
user to the desired portion of the downloaded digital information content as 
specified by the table of contents residing in the header of the downloaded 
data. The user may preview selected portions of the digital information 
content by selecting a preview option. The preview option plays a 
predetermined portion of a selected digital information program. Upon 
selection of a particular digital information program, the selected digital 
information program is played for the user after the mobile playback device 
212 converts the digital information content into sound or displayable 
imagery which is played through an audio output means or displayed on a 
display device. 

The software player 226 of client computer system 214 may also receive 
digital information content in approximately the same form as the digital 
information content downloaded to the mobile playback device 212; 
however, the digital information content for the software player 226 does not 
need to be downloaded to the software player 226. The software player 226 
has direct access to the digital information content; because, it shares 
memory and /or disk storage space with the client computer system 214. 
Therefore, there are no downloading or memory map concerns. In the same 



31 



WO 99/18506 



PCT/US98/20659 



manner as the mobile playback device 212, the software player 226 performs 
digital signature verification, verification of checksums, and receiving 
targeted information. In an alternative embodiment, software player 226 may 
use a communication protocol similar to that of mobile playback device 212 
when receiving digital information content, configuration information, and 
dynamically downloaded software. 

FIG. 4 illustrates an alternative embodiment of the present invention. 
As shown in FIG. 4, authoring system 280 can support a plurality of library 
servers 260. Each library server can be configured to support a specific type of 
digital information content. In the same manner described above, the client 
computer systems 214 access network 240 and obtain digital information 
content from any of the library servers 260 after performing the 
authentication process described above. Authorization server 270 is provided 
for this purpose. The configuration illustrated in FIG. 4 provides a more 
distributed architecture thereby dispersing the load across several server 
platforms. A site with many client computer systems 214 may have its own 
library server 260 to reduce demand on network 240. This architecture scales 
well as the number of client computer systems 214 grows and the content 
provided by the library server 260 grows. 

FIG. 5 illustrates another embodiment of the present invention except 
the library server 461 has been implemented as a plurality of separate 
processes or tasks 460 running concurrently on a single library server 
platform 461. Each library server process 460 services requests for access to its 
corresponding portion of the digital information content. This content is 
created using authoring system 280 in the manner described above. The 
authorization server 270 is used to validate the links between the client 
computer systems 214 and the library server processes 460. The configuration 
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illustrated in FIG. 5 is advantageous in that the convenience of a single 
server is maintained while the scalability of multiple libraries is also 
supported. 

This concept can also be used for the authoring and authorization 
servers 280 and 270, respectively. As shown in FIG. 6, the authoring system 
280 and the authorization server 270 is implemented on a single platform 
685 as authoring process 680 and authorization process 670. These processes 
perform the same functions as described above, except the implementation 
provides the convenience of a single server and the scalability of multiple 
processes for the authoring and authorization tasks. 

FIG. 7 illustrates yet another alternative embodiment wherein the 
client computer systems 214 include a local library 710. The local library 710 
provides a local storage area and library access control functionality which 
provides access to a subset of the archived digital information from library 
server 260. In the manner described above, the user of a client computer 
system 214 identifies the titles or items of digital information in library 
server 260 that the user wishes to access. In the preferred embodiment, these 
content selections are transferred to a client storage area 220 (as shown in 
FIG. 2) for subsequent downloading to mobile playback device 212. The 
embodiment shown in FIG. 7 expands upon the client storage area 220 and 
creates a local library 710. The local library 710 is used for storage of selected 
content; but also for searching, sorting, categorizing, and abstracting the 
locally stored content. The local library 710 allows a client computer system 
214 to maintain a small subset of the full library which may be used to create 
custom collections of content in a variety of user selected configurations. 
Client systems 214 may be permitted to access the contents of local libraries 
710 on other client systems 214. In a related alternate embodiment, library 
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server processes 460 may also reside on selected client systems 214. This 
embodiment allows client systems 214 to browse and purchase content that is 
scrambled, targeted, and delivered from library server process 460 executing 
on a locally positioned client system 214. By maintaining the library locally, a 
5 portion of the network access and transfer overhead is eliminated. 

FIG. 8 illustrates another alternative embodiment of the present 
invention wherein the client computer system 214 is eliminated and the 
mobile playback device 212 is connected directly to the network 240 through 
network interface 810. In the preferred embodiment, the mobile playback 

10 device 212 is a minimal capability device primarily dedicated to playing 
audio files or displaying visual images or text on a display device. The 
mobile playback device 212 is minimally configured to retain its light-weight, 
low cost, and readily mobile features. The preferred embodiment does not 
therefore include the use of a portable personal computer or laptop 

15 computer; because, such devices typically do not meet the light-weight and 
low cost constraints of the preferred mobile playback device 212. However, 
the minimal mobile playback device 212 may be augmented to add network 
interface 810 which comprises a conventional hardware connector, hardware 
buffers and controllers, and firmware support for a particular conventional 

20 network protocol. For example, the mobile playback device 212 may be 

augmented with an integrated modem that includes a telephone jack with 
which the playback device may be connected to a telephone network. It will 
be apparent to those of ordinary skill in the art that network interface 810 
may be implemented in a low cost and light-weight device such as mobile 

25 playback device 212. Because the client system browser 219 would not be 

available in the alternative embodiment shown in FIG. 8, a simplified user 
interface may be provided in firmware or other non-volatile memory of 
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mobile playback device 212 with which the user may select items of digital 
information for download and playback from library server 260. As described 
above, the authentication process to validate the link between the mobile 
playback device 212 and the library server 260 must also be performed prior 
to user access to the library server 260 content. Alternatively, a client system 
814 coupled to network 240 may be provided to support client browser 219 
and thereby enable selection of items of digital information for download 
and playback from library server 260 directly to any of the mobile playback 
devices 212. Client systems 814 may support local storage of digital 
information, software, and configuration data in a form similar to storage 
space 220 or local library 710. In addition, a more simplified implementation 
of network interface 810 may be designed to communicate via network 240 to 
client system 814 instead of library server 260. 

In another alternative embodiment of the present invention, digital 
information programming selections are made using the client computer 
system 214 and library server 260 as described above; however, the selections 
are delivered on mass storage medium 241. Mass storage medium 241 
represents any of a variety of conventional mass storage technologies 
including CD-ROM, PCMCIA cards, DVDs, floppy disks, removable hard 
drives, digital magnetic tape, optical cards, flash memory or other optical, 
magnetic, electronic, or semiconductor memory devices. Upon selection by a 
user of a client computer system 214, selected programming is targeted and 
scrambled as described above and transferred to a selected mass storage 
medium 241 and mailed, hand-delivered, or held for pickup by the user. 
Once the user takes physical possession of the selected mass storage media 
241, the selected programming may be read from the mass storage medium 
241 by the client browser 219 and thereafter transferred to the mobile playback 
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device 212 as described above. FIG. 9 illustrates another embodiment of the 
system that does not include the use of client computer 214 to transfer data to 
mobile playback device 212. Kiosk 910 consists of a computer system such as 
the one described above in FIG. 1. Kiosk 910 is a publicly accessible unit that 
5 can perform browse, content purchase, and download functions in a manner 
equivalent to a client computer system 214. The kiosk 910 is special because it 
contains its own library server for fast local access and download of content. 
Kiosk 910 contains a mobile device interface 221, a special version of client 
browser 219, and local library server process 460. Kiosk library server process 

10 460 has local storage of scrambled and compressed digital information files 
262. These compressed information files 262 originate from remote 
authoring system 280 and may be delivered via physical transport of mass 
storage media 241 or via distribution network 240. A customer operates 
client browser 219 to browse, select, and purchase digital information files 

15 that are delivered to the customer's mobile playback device 212. 

Authentication, targeting, and download processes are performed within the 
kiosk by library server process 460 that is connected to remote authorization 
server 270 over network 240. In a related embodiment, FIG. 7 shows a client 
system 214 with local library 710 that can be converted into a kiosk with 

20 functionality similar to kiosk 910. In this system, a special version of client 
browser 219 provides the same user functionality as the previous kiosk 
embodiment. 

An alternate embodiment of the system uses a common 
communication network to connect all system components. In FIG. 10, 
25 network 240 is directly coupled to client system 214 and 814, network 

interface(s) 810, library server(s) 260, authorization server 270, and authoring 
system(s) 280. One of ordinary skill in the art will realize that network 240 
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can also be segmented into a number of independent networks or 
communication links without changing the functionality of the system. 

As described above, mobile playback devices 212 are intended to play 
only authorized digital information content. Each mobile playback device 
212 is embedded with a unique player ID and may optionally include one or 
more group ID values. A candidate digital information file is embedded 
with one or more player IDs and group IDs. The embedded software of the 
mobile playback device 212 inspects the list of player IDs and group IDs 
embedded in the candidate digital information file, and if at least one of the 
player IDs or group IDs matches the mobile playback device 212 player ID or 
group IDs, the mobile playback device 212 will proceed to play the digital 
information file. If no match is found, the mobile playback device 212 will 
not play the digital information file. 

The assignment of a player ID to a mobile playback device 212 is 
preferably performed at the time of manufacture of the mobile playback 
device 212. Assignment of a group ID to a mobile playback device 212 can 
happen at different times for different reasons. Typically, a user who is 
accessing digital information files from the digital information library is 
assigned a single group ID associated with the user's account, and that group 
ID is embedded, in the user's mobile playback device. Group IDs can be 
embedded in groups of playback devices, corresponding to the devices 
maintained by a company, or those of a single account holder, or in players 
owned by members of a special interest group or club. 

In practice, a digital information file is embedded with a user's account 
specific group ID when the user purchases access to the digital information 
file, and that specific version of the digital information file is made available 
to the user. 
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In order to insure that a specific digital information file with 
embedded player IDs and group IDs cannot be altered to subvert the intent of 
the targeting, a security scheme using the digital signature standard (DSS) is 
preferably implemented as shown in FIG. 11. At 1101, the header of a digital 
information file to be targeted is embedded with the appropriate player IDs 
and Group IDs. For each n seconds of program data, a secure hash using a 
secure hash algorithm (SHA) is computed at 1103. At 1105, a digital signature 
message is created that includes relevant data associated with the digital 
information file being targeted. Such information may include, but is not 
limited to, the following information items: 

-Program header version number 

-Hash algorithm version number 

-Program serial number 

-Hash block size 

-Player ID count 

-Player ID list 

-Group ID count 

-Group ID list 

-Hash table count 

-Hash values 

It will be recognized that entries may be added to or removed from the 
above list of information items without loss of compatibility with the 
present invention. At 1107, the message is provided for digital signature 
authentication (DSA), and the resulting digital signature is embedded into 
the digital information file at 1109. 

A preferred player security scheme using DSA is shown in FIG. 12. At 
1201, the program file header, header signature, message and a portion of the 
program data is transferred to the player. After receiving the information, at 
1203 the player performs DSA to authenticate the signature as having been 
created by the sender, typically the library server. If successful, at 1205 the 
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player then compares the player ID and group ID of the player with the list 
embedded in the message. If at least one player or group ID matches, at 1207 
the player computes a secure hash for each n seconds the portion of the 
program data transferred to the player from the library server. If each 
computed hash appears in the message, at 1209 the player plays the program 
data. It will be recognized that other player security shemes other that DSA 
may be used without loss of compatibility with the present invention. For 
example, a private may be used in conjunction with an encyption algorithm 
to insure that program data orignates from an authorized source, and is 
valid. 

Thus, a method and apparatus for implementing a computer network 
based digital information library system employing authentication and 
encryption protocols for the secure transfer of digital information library 
programs, software, and configuration data to a client computer system and a 
mobile digital information playback device removably connectable to the 
client computer system is disclosed. Although the present invention has 
been described with respect to specific examples and subsystems, it will be 
apparent to those of ordinary skill in the art that the invention is not limited 
to these specific examples or subsystems but extends to other embodiments as 
well. The present invention includes all of these other embodiments as 
specified in the claims that follow. 
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CLAIMS 

What is claimed is: 

1 1- A method for targeting a digital information playback device 

2 comprising the steps of; 

3 embedding a first device identifier in the playback device; 

4 embedding a second device identifier in a digital information file; 

5 providing the digital information file to the playback device; 

6 comparing the first device identifier to the second device identifier; 

7 and 

8 playing the digital information file if the first device identifier 

9 matches the second device identifier. 

1 2. The method of claim 1 wherein the step of embedding the first device 

2 identifier comprises the step of embedding a unique identifier in the 

3 playback device. 

1 3. The method of claim 1 wherein the step of embedding the second 

2 device identifier comprises the step of embedding the second device 

3 identifier in a header block of the digital information file. 

1 4. The method of claim 3 further comprising the step of executing a 

2 digital signature algorithm to authenticate the header block. 

1 5. The method of claim 1 further comprising the steps of: 
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2 computing a first encoding value for a section of the digital 

3 information file; 

4 embedding the first encoding value in the digital information file; 

5 computing a second encoding value when the digital information file 

6 is provided to the playback device; 

7 Paying the digital information file if the first encoding value matches 

8 the second encoding value. 

1 6. The method of claim 5 wherein the step of embedding the first 

2 encoding value comprises the step of embedding a secure hash value in the 

3 section. 

1 7. The method of claim 1 further comprising the steps of: 

2 recording a first group identifier in the playback device; 

3 embedding a second group identifier in the digital information file; 

4 comparing the first group identifier to the second group identifier; and 

5 if the first group identifier matches the second group identifier, 

6 playing the digital information file. 

1 8. The method of claim 7 wherein the step of recording the first group 

2 identifier comprises the step of electronically receiving the group identifier 

3 from a remote electronic source. 

1 9. The method of claim 7 wherein the step of embedding the second 

2 group identifier comprises the step of embedding the second group identifier 

3 in the header block of the digital information file. 
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10. The method of claim 9 further comprising the step of executing a 
digital signature algorithm to authenticate the header block. 

11. The method of claim 1 further comprising the step of executing a 
digital signature algorithm to authenticate the digital information file. 

12. The method of claim 1 further comprising the step of executing a 
digital signature algorithm to authenticate a section of the digital 
information file. 



42 



WO 99/18506 



PCT/US98/20659 



1 13. An article of manufacture for use in a computer system for 

2 targeting a digital information playback device, the computer having a 

3 keyboard, pointing device, visual display, and data storage device, the article 

4 of manufacture comprising a computer usable medium having computer 

5 readable program code means embodied in the medium, the program code 

6 means including: 

7 computer readable program code means embodied in the computer 

8 usable medium for causing a computer to embed a first device identifier in 

9 the playback device; 

10 computer readable program code means embodied in the computer 

1 1 usable medium for causing a computer to embed a second device identifier 

12 in a digital information file; 

13 computer readable program code means embodied in the computer 

14 usable medium for causing a computer to provide the digital information 

15 file to the playback device; 

16 computer readable program code means embodied in the computer 

17 usable medium for causing a computer to compare the first device identifier 

18 to the second device identifier; and 

*9 computer readable program code means embodied in the computer 

20 usable medium for causing a computer to play the digital information file if 

21 the first device identifier matches the second device identifier. 

1 14. The article of manufacture of claim 13 wherein the computer readable 

2 program code means for causing a computer to embed the first device 

3 identifier comprises computer readable program code means embodied in 

4 the computer usable medium for causing a computer to embed a unique 

5 identifier in the playback device. 
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1 15, The article of manufacture of claim 13 wherein the computer readable 

2 program code means for causing a computer to embed the second device 

3 identifier comprises computer readable program code means embodied in 

4 the computer usable medium for causing a computer to embed the second 

5 device identifier in a header block of the digital information file. 

1 16. The article of manufacture of claim 15 further comprising computer 

2 readable program code means embodied in the computer usable medium for 

3 causing a computer to execute a digital signature algorithm to authenticate 

4 the header block. 

1 17. The article of manufacture of claim 13 further comprising: 

2 computer readable program code means embodied in the computer 

3 usable medium for causing a computer to compute a first encoding value for 

4 a section of the digital information file; 

5 computer readable program code means embodied in the computer 

6 usable medium for causing a computer to embed the first encoding value in 

7 the digital information file; 

8 computer readable program code means embodied in the computer 

9 usable*medium for causing a computer to compute a second encoding value 

10 when the digital information file is provided to the playback device; 

11 computer readable program code means embodied in the computer 

12 usable medium for causing a computer to play the digital information file if 

13 the first encoding value matches the second encoding value. 

1 18. The article of manufacture of claim 17 wherein the computer readable 

2 program code means for causing a computer to embed the first encoding* 
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3 value comprises computer readable program code means embodied in the 

4 computer usable medium for causing a computer to embed a secure hash 

5 value in the section. 

1 19. The article of manufacture of claim 13 further comprising: 

2 computer readable program code means embodied in the computer 

3 usable medium for causing a computer to record a first group identifier in 

4 the playback device; 

5 computer readable program code means embodied in the computer 

6 usable medium for causing a computer to embed a second group identifier in 

7 the digital information file; 

8 computer readable program code means embodied in the computer 

9 usable medium for causing a computer to comparethe first group identifier 

10 to the second group identifier; and 

1 1 computer readable program code means embocfied in the computer 

12 usable medium for causing a computer to play the digital information file if 

13 the first group identifier matches the second group identifier. 

1 20, The article of manufacture of claim 19 wherein the computer readable 

2 program code means for causing a computer to record the first group 

3 identifier comprises computer readable program code means embodied in 

4 the computer usable medium for causing a computer to electronically 

5 receive the group identifier from a remote electronic source. 

1 21. The article of manufacture of claim 19 wherein the computer readable 

2 program code means for causing a computer to embed the second group 
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3 identifier comprises computer readable program code means embodied in 

4 the computer usable medium for causing a computer to embed the second 

5 group identifier in the header block of the digital information file. 

1 22. The article of manufacture of claim 21 further comprising computer 

2 readable program code means embodied in the computer usable medium for 

3 causing a computer to execute a digital signature algorithm to authenticate 

4 the header block. 

1 23. The article of manufacture of claim 13 further comprising computer 

2 readable program code means embodied in the computer usable medium for 

3 causing a computer to execute a digital signature algorithm to authenticate 

4 the digital information file. 

1 24. The article of manufacture of claim 13 further comprising computer 

2 readable program code means embodied in the computer usable medium for 

3 causing a computer to execute a digital signature algorithm to authenticate 

4 the header block. 
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25. A system for targeting a digital information playback device 
comprising: 

a digital computer having first embed means for embedding a first 
device identifier in the playback device; 

second embed means operated by the digital computer for embedding 
a second device identifier in a digital information file; 

means logically coupled to the digital computer for providing the 
digital information file to the playback device; 

comparison means operated by the digital computer for comparing the 
first device identifier to the second device identifier; and 

play means logically coupled to the digital computer for playing the 
digital information file if the first device identifier matches the second 
device identifier. 

26. The system of claim 25 wherein the first embed means further 
comprises means for embedding a unique identifier in the playback device. 

27. The system of claim 25 wherein the second embed means further 
comprises means for embedding the second device identifier in a header 
block of the digital information file. 

28. The system of claim 27 further comprising authentication means 
operated by the digital computer for executing a digital signature algorithm 
to authenticate the header block. 

29. The system of claim 25 further comprising: 
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2 means operated by the digital computer for computing a first encoding 

3 value for a section of the digital information file; 

4 means operated by the digital computer for embedding the first 

5 encoding value in the digital information file; 

6 means operated by the .digital computer for computing a second 

7 encoding value when the digital information file is provided to the playback 

8 device; 

9 means operated by the digital computer for playing the digital 

10 information file if the first encoding value matches the second encoding 

11 value. 

1 30. The system of claim 29 wherein the first embed means further 

2 comprises means for embedding a secure hash value in the section. 

1 31. The system of claim 25 further comprising: 

2 means operated by the digital computer for recording a first group 

3 identifier in the playback device; 

4 means operated by the digital computer for embedding a second group 

5 identifier in the digital information file; 

6 means operated by the digital computer for comparing the first group 

7 identifier to the second group identifier; and 

8 means operated by the digital computer for playing the digital 

9 information file if the first group identifier matches the second group 
10 identifier. 
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1 32. The system of claim 31 wherein the means for recording the first 

2 group identifier further comprises means for electronically receiving the 

3 group identifier from a remote electronic source. 

1 33. The system of claim 31 wherein the means for embedding the second 

2 group identifier further comprises means for embedding the second group 

3 identifier in the header block of the digital information file. 

1 34. The system of claim 33 further comprising means operated by the 

2 digital computer for executing a digital signature algorithm to authenticate 

3 the header block. 

1 35, The system of claim 25 further comprising means operated by the 

2 digital computer for executing a digital signature algorithm to authenticate 

3 the digital information file. 

1 36. The system of claim 25 further comprising means operated by the 

2 digital computer for executing a digital signature algorithm to authenticate a 

3 section of the digital information file. 
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37. A system for targeting an audio playback device comprising: 

a digital computer having first embed means for embedding a device 

identifier in an audio file; 

second embed means operated by the digital computer for embedding 

a group identifier in the audio file; and 

means logically coupled to the digital computer for providing the 

audio file to the playback device. 
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